Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File:                     F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier:          ObHTh8t3n9s4gW75uDcbCZSdC1hhUrf5qSPTrKr0iRg=
Subject key identifier:   88:13:9C:27:6A:20:DE:EB:B0:8C:0D:49:5C:F5:60:92:CE:9C:CF:6B
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer:       /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial:       0197B890447940C7D16489D21300AD1A67AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number:          07EB
Signing time:             Sat 28 Jun 2025 22:02:31 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:31 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:31 +0000
Files and hashes:         1: F3XdxSn1elmets19uiuSstN190o.crl (hash: rqGQEn6n8va1p2XnCH4HrCo/XcZplpOVRg4u4OHNvww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:44:79:40:c7:d1:64:89:d2:13:00:ad:1a:67:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
        Validity
            Not Before: Jun 28 22:02:31 2025 GMT
            Not After : Jun 29 22:02:31 2025 GMT
        Subject: CN=88139c276a20deebb08c0d495cf56092ce9ccf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:ed:81:14:59:d7:84:f3:3b:eb:78:da:f8:
                    07:20:76:9e:2e:63:ae:31:82:e9:58:ad:20:39:48:
                    32:73:93:36:8d:92:a2:83:30:dd:84:d4:2b:5f:58:
                    14:8b:56:75:29:b7:8a:01:04:26:1f:f2:c9:ad:0a:
                    6f:75:68:e4:a8:20:17:da:5b:f1:12:9f:4e:c9:3e:
                    d2:90:9f:fd:83:57:50:3a:da:1b:26:c2:bf:d0:79:
                    7f:33:a6:dd:bf:38:0d:68:c5:b1:6b:7c:5d:64:f4:
                    16:14:5d:80:bc:7b:52:8b:3e:ea:db:7c:d9:a2:ed:
                    9b:80:cc:60:82:48:a3:73:48:c7:85:36:f0:8b:ec:
                    6a:78:a4:a7:8c:87:43:32:72:f3:64:7d:f1:d2:a5:
                    fd:42:39:a5:21:b0:bd:ac:bd:38:8d:ce:58:e7:30:
                    6f:ac:69:27:7a:e9:fb:cb:0e:65:3e:58:61:66:f0:
                    88:27:42:be:4b:0e:ae:76:d2:d6:49:9e:81:a4:6f:
                    45:22:bd:9f:98:9e:ac:67:ad:10:ee:a9:2b:19:a3:
                    ba:5a:b5:e8:69:ee:e6:80:1a:bc:17:ec:c6:d3:09:
                    90:6e:d5:37:a2:98:d0:60:04:89:20:e3:66:e3:4c:
                    0a:ca:3c:13:cd:cf:e8:ff:3e:ae:00:2c:4c:bd:e0:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:13:9C:27:6A:20:DE:EB:B0:8C:0D:49:5C:F5:60:92:CE:9C:CF:6B
            X509v3 Authority Key Identifier:
                keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:ff:34:f1:48:e1:db:0a:df:7c:98:e4:c6:30:ed:ec:6a:
         c3:c5:78:72:f1:f5:0e:36:83:92:d7:34:6f:eb:a9:11:96:01:
         39:7d:4c:4a:67:6f:f6:63:21:7d:7b:52:a5:c0:23:49:0e:6f:
         53:44:94:ea:a6:dc:80:e2:a3:83:f9:33:0f:a0:77:f9:00:8f:
         84:0c:a6:61:0b:d6:4a:9d:cc:60:1b:40:a3:25:27:33:07:e3:
         b2:44:8a:f9:d6:fc:d6:de:56:22:19:9e:ac:97:19:f9:3f:a5:
         42:e4:84:13:1b:ab:4f:e9:61:42:10:ab:43:62:36:ec:09:f6:
         81:b7:09:bc:43:8d:b3:41:86:9d:77:bc:5f:99:de:01:4b:77:
         58:3a:b1:38:59:b2:d4:ab:87:59:d9:6d:86:35:90:1d:bb:c3:
         9b:94:d3:d7:97:8c:17:40:ef:6b:20:03:99:d9:36:85:ad:33:
         4d:7a:9c:ec:23:4b:3a:9d:92:73:1d:67:8c:1f:a7:3a:23:d7:
         85:33:05:aa:95:b4:14:b8:ff:5c:f5:ee:99:d3:35:fc:26:23:
         db:48:11:4e:83:96:1c:dc:e1:1b:1c:44:27:4e:7b:78:14:d6:
         fc:0e:8d:6c:47:b2:5e:bb:f1:9d:96:49:1c:6d:8b:48:99:03:
         4b:59:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:28:20 2025 by rpki-client